Autopsy  4.7.0
Graphical digital forensics platform for The Sleuth Kit and other tools.
Classes | Public Member Functions | Static Public Attributes | Private Member Functions | Static Private Member Functions | Private Attributes | Static Private Attributes | List of all members
org.sleuthkit.autopsy.datamodel.KeywordHits Class Reference

Inherits org.sleuthkit.autopsy.datamodel.AutopsyVisitableItem.

Classes

class  DetachableObserverChildFactory
 
class  HitsFactory
 
class  KeywordResults
 
class  KWHitsNodeBase
 
class  ListFactory
 
class  ListNode
 
class  RegExpInstanceKey
 
class  RegExpInstanceNode
 
class  RegExpInstancesFactory
 
class  RootNode
 
class  TermFactory
 
class  TermNode
 

Public Member Functions

 KeywordHits (SleuthkitCase skCase)
 

Static Public Attributes

static final String NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()
 

Private Member Functions

BlackboardArtifactNode createBlackboardArtifactNode (Long artifactId)
 

Static Private Member Functions

static boolean isOnlyDefaultInstance (List< String > instances)
 

Private Attributes

final KeywordResults keywordResults
 
SleuthkitCase skCase
 

Static Private Attributes

static final String DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
 
static final String KEYWORD_HIT_ATTRIBUTES_QUERY
 
static final String KEYWORD_HITS = KeywordHits_kwHits_text()
 
static final Logger logger = Logger.getLogger(KeywordHits.class.getName())
 
static final String SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
 
static final String SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()
 

Detailed Description

Keyword hits node support

Definition at line 61 of file KeywordHits.java.

Constructor & Destructor Documentation

org.sleuthkit.autopsy.datamodel.KeywordHits.KeywordHits ( SleuthkitCase  skCase)

Member Function Documentation

BlackboardArtifactNode org.sleuthkit.autopsy.datamodel.KeywordHits.createBlackboardArtifactNode ( Long  artifactId)
private
static boolean org.sleuthkit.autopsy.datamodel.KeywordHits.isOnlyDefaultInstance ( List< String >  instances)
staticprivate

Member Data Documentation

final String org.sleuthkit.autopsy.datamodel.KeywordHits.DEFAULT_INSTANCE_NAME = "DEFAULT_INSTANCE_NAME"
staticprivate

String used in the instance MAP so that exact matches and substring can fit into the same data structure as regexps, even though they don't use instances.

Definition at line 82 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HIT_ATTRIBUTES_QUERY
staticprivate
Initial value:
= "SELECT blackboard_attributes.value_text, "
+ "blackboard_attributes.value_int32, "
+ "blackboard_attributes.artifact_id, "
+ "blackboard_attributes.attribute_type_id "
+ "FROM blackboard_attributes, blackboard_artifacts "
+ "WHERE blackboard_attributes.artifact_id = blackboard_artifacts.artifact_id "
+ " AND blackboard_artifacts.artifact_type_id = " + BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getTypeID()
+ " AND (attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_SET_NAME.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_SEARCH_TYPE.getTypeID()
+ " OR attribute_type_id = " + BlackboardAttribute.ATTRIBUTE_TYPE.TSK_KEYWORD_REGEXP.getTypeID()
+ ")"

query attributes table for the ones that we need for the tree

Definition at line 87 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.KEYWORD_HITS = KeywordHits_kwHits_text()
staticprivate

Definition at line 66 of file KeywordHits.java.

final KeywordResults org.sleuthkit.autopsy.datamodel.KeywordHits.keywordResults
private

Definition at line 75 of file KeywordHits.java.

final Logger org.sleuthkit.autopsy.datamodel.KeywordHits.logger = Logger.getLogger(KeywordHits.class.getName())
staticprivate

Definition at line 63 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.NAME = BlackboardArtifact.ARTIFACT_TYPE.TSK_KEYWORD_HIT.getLabel()
static

Definition at line 72 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_LITERAL_SEARCH = KeywordHits_simpleLiteralSearch_text()
staticprivate

Definition at line 68 of file KeywordHits.java.

final String org.sleuthkit.autopsy.datamodel.KeywordHits.SIMPLE_REGEX_SEARCH = KeywordHits_singleRegexSearch_text()
staticprivate

Definition at line 70 of file KeywordHits.java.

SleuthkitCase org.sleuthkit.autopsy.datamodel.KeywordHits.skCase
private

The documentation for this class was generated from the following file:

Copyright © 2012-2016 Basis Technology. Generated on: Mon Jun 18 2018
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.